CVE-2026-67073

HIGH Status: Deferred

CVSS Scores

CVSS v3.x Base Score
8.6
HIGH

Description

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized access, or system compromise.

Published
October 28, 2026 1:17 PM
Last Modified
October 28, 2026 2:05 PM
Source
[email protected]

Weaknesses (CWE)

CWE-79 CWE-284 CWE-434 CWE-552

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry